interfaces {
    bridge br1 {
        address "10.129.10.1/24"
        description "vxlan interface"
        enable-vlan
        member {
            interface eth2 {
                native-vlan "30"
            }
            interface eth3 {
                allowed-vlan "10"
                allowed-vlan "20"
                allowed-vlan "30"
                native-vlan "1"
            }
            interface vxlan1 {
            }
        }
        mtu "9190"
        vif 10 {
            address "10.130.10.1/24"
            mtu "9190"
        }
        vif 20 {
            mtu "9190"
        }
        vif 30 {
            mtu "9190"
        }
    }
    dummy dum1 {
        address "1.1.1.1/32"
        mtu "9190"
    }
    ethernet eth0 {
        address "dhcp"
        hw-id "00:0c:29:2d:44:2b"
    }
    ethernet eth1 {
        hw-id "00:0c:29:2d:44:35"
        offload {
            gro
            gso
            sg
            tso
        }
    }
    ethernet eth2 {
        description "TrueNAS interface"
        hw-id "00:0c:29:2d:44:3f"
        mtu "9000"
        offload {
            gro
            gso
            sg
            tso
        }
    }
    ethernet eth3 {
        description "vxlan interface"
        hw-id "00:0c:29:2d:44:49"
        mtu "9190"
        offload {
            rfs
            rps
            sg
            tso
        }
    }
    ethernet eth4 {
        description "TrueNAS interface"
        hw-id "00:0c:29:2d:44:53"
        mtu "9000"
        offload {
            gro
            gso
            sg
            tso
        }
    }
    ethernet eth5 {
        address "172.16.32.1/30"
        description "2.5G interface"
        hw-id "00:e0:4c:ee:89:5b"
        mtu "9190"
        offload {
            gro
            gso
            rfs
            rps
            sg
            tso
        }
    }
    loopback lo {
    }
    vxlan vxlan1 {
        mtu "9190"
        parameters {
            external
            nolearning
        }
        source-address "1.1.1.1"
        vlan-to-vni 1 {
            vni "100"
        }
        vlan-to-vni 10 {
            vni "1001"
        }
        vlan-to-vni 20 {
            vni "1002"
        }
        vlan-to-vni 30 {
            vni "1003"
        }
    }
}
protocols {
    bgp {
        address-family {
            ipv4-unicast {
                network 1.1.1.1/32 {
                }
            }
            l2vpn-evpn {
                advertise-all-vni
                advertise-svi-ip
            }
        }
        neighbor 2.2.2.1 {
            address-family {
                ipv4-unicast
            }
            description "NB01"
            peer-group "EVPN-OVERLAY"
        }
        neighbor 172.16.32.2 {
            description "NB01"
            peer-group "IPv4-UNDERLAY"
        }
        parameters {
            log-neighbor-changes
            router-id "1.1.1.1"
        }
        peer-group EVPN-OVERLAY {
            address-family {
                l2vpn-evpn
            }
            bfd
            ebgp-multihop "3"
            remote-as "external"
            update-source "dum1"
        }
        peer-group IPv4-UNDERLAY {
            address-family {
                ipv4-unicast {
                    default-originate
                }
            }
            bfd
            remote-as "external"
        }
        system-as "65001"
    }
}
service {
    dhcp-server {
        hostfile-update
        listen-interface "br1.10"
        shared-network-name Lab1 {
            authoritative
            subnet 10.130.10.0/24 {
                option {
                    default-router "10.130.10.1"
                    domain-name "asp.local"
                    domain-search "asp.local"
                    name-server "10.130.10.1"
                }
                range 10 {
                    start "10.130.10.128"
                    stop "10.130.10.250"
                }
                subnet-id "1"
            }
        }
    }
    dns {
        forwarding {
            allow-from "10.128.0.0/13"
            authoritative-domain asp.local {
                records {
                    a ESXi8-inf-H1 {
                        address "10.129.10.230"
                    }
                    a ESXi8-inf-H2 {
                        address "10.129.10.240"
                    }
                    ptr 230 {
                        target "ESXi8-inf-H1.asp.local"
                    }
                    ptr 240 {
                        target "ESXi8-inf-H2.asp.local"
                    }
                }
            }
            domain 10.130.10.in-addr.arpa {
                name-server 127.0.0.1 {
                }
            }
            listen-address "10.130.10.1"
            listen-address "10.129.10.1"
            name-server 10.10.3.251 {
            }
            system
        }
    }
    ntp {
        allow-client {
            address "127.0.0.0/8"
            address "169.254.0.0/16"
            address "10.0.0.0/8"
            address "172.16.0.0/12"
            address "192.168.0.0/16"
            address "::1/128"
            address "fe80::/10"
            address "fc00::/7"
        }
        server time1.vyos.net {
        }
        server time2.vyos.net {
        }
        server time3.vyos.net {
        }
    }
    router-advert
    ssh
}
system {
    config-management {
        commit-revisions "100"
    }
    console {
        device ttyS0 {
            speed "115200"
        }
    }
    host-name "vyos-NB02"
    login {
        user vyos {
            authentication {
                encrypted-password "$6$8jrcX07xQ0iEVPH6$UrI0L2tgnmYxr6waF2H1Z.gXGinxcwMPLNQ9SM35dcPZKqInYn9zqJPVv/RYnUl8wI.xPuHZ.PY8bIHmFlHHy0"
            }
        }
    }
    name-server "eth0"
    option {
        disable-usb-autosuspend
        kernel {
            disable-mitigations
            disable-power-saving
        }
        keyboard-layout "uk"
        performance "throughput"
        reboot-on-panic
    }
    syslog {
        global {
            facility all {
                level "info"
            }
            facility local7 {
                level "debug"
            }
        }
    }
    time-zone "Europe/London"
}

// Warning: Do not remove the following line.
// vyos-config-version: "bgp@5:broadcast-relay@1:cluster@2:config-management@1:conntrack@5:conntrack-sync@2:container@2:dhcp-relay@2:dhcp-server@11:dhcpv6-server@6:dns-dynamic@4:dns-forwarding@4:firewall@17:flow-accounting@1:https@6:ids@1:interfaces@33:ipoe-server@4:ipsec@13:isis@3:l2tp@9:lldp@2:mdns@1:monitoring@1:nat@8:nat66@3:ntp@3:openconnect@3:openvpn@4:ospf@2:pim@1:policy@8:pppoe-server@11:pptp@5:qos@2:quagga@11:reverse-proxy@1:rip@1:rpki@2:salt@1:snmp@3:ssh@2:sstp@6:system@27:vrf@3:vrrp@4:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2"
// Release version: 1.5-rolling-202409250007